This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json) Hash identifier: C2WdbDhmiONWy2+F2zUB+qbVfT2BlRrz8UJxv2uN4yg= Subject key identifier: 5A:57:24:00:EC:6B:B9:C1:E0:26:47:93:BD:1B:E8:FC:0A:38:C0:A6 Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C Certificate serial: 102A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft Manifest number: 1011 Signing time: Wed 24 Dec 2025 17:11:26 +0000 Manifest this update: Wed 24 Dec 2025 17:11:26 +0000 Manifest next update: Wed 31 Dec 2025 17:11:26 +0000 Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: FvbBn3XNKBbovCloMIknRm2Jg3juUhoJqPqeTeAmN6k=) 2: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: jKjjt2VMX2OyaKrGVueLOjhPSZoYcuGJoWMyYUxs8bM=) 3: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: MIfxKi8mqzy4qfoso9S7UhSd/IeBwSzQBKvFHVpyedo=) 4: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: HeL3v4bVI9uczPOUq41UBh1VIigK//d/8NJCyMV1Esw=) 5: 2E6E6386D21E11F0B5C0A977C4F9AE02.roa (hash: nmmwbRgeg6x+DwLWt0s6OMWtS0zyAxCJ4V/dXBc7nRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4138 (0x102a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C Validity Not Before: Dec 24 17:11:26 2025 GMT Not After : Dec 31 17:11:26 2025 GMT Subject: CN=694c1ebe-84d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2b:b4:b2:c7:64:df:ee:09:46:77:04:2b:25: 72:7d:d9:7e:76:ab:73:12:1c:b8:34:c6:32:35:35: 73:90:32:5e:37:7e:61:14:cc:ff:33:29:13:a2:2e: b8:7d:da:cc:aa:01:9b:f1:f3:0b:33:cc:be:ad:81: 46:67:c9:ad:76:6c:56:2a:83:6b:d2:68:64:8d:3d: a5:13:4b:93:f5:9a:48:a3:37:8f:16:8d:0f:f3:35: 8e:b2:dd:3d:0b:69:27:27:ab:82:aa:a8:f3:af:98: e5:1b:4c:6f:8f:57:e3:5b:7d:42:af:ce:41:de:3c: d5:28:f2:01:c9:ce:4b:b6:c3:ab:13:5e:bb:5a:b8: 7a:15:da:e7:f9:da:8f:a0:23:fb:6b:9e:82:c8:bd: 3e:be:6b:86:4b:11:22:a5:c9:7d:a7:b8:0d:1d:6c: 4e:f8:e4:2a:c7:31:83:6a:db:37:01:57:39:b5:c5: 84:38:6a:ec:f5:38:cc:fa:d6:f0:33:7b:f5:16:b1: 33:aa:f9:fc:3b:82:2b:79:99:5d:14:d6:1d:26:27: 1b:a1:e4:de:a7:f7:16:20:c1:44:de:c9:34:20:00: f2:5d:4b:e3:88:7f:3f:ce:55:bc:f0:28:30:de:5c: c3:b3:ad:25:41:7d:64:7e:ff:56:1a:cb:f6:d8:03: 95:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:57:24:00:EC:6B:B9:C1:E0:26:47:93:BD:1B:E8:FC:0A:38:C0:A6 X509v3 Authority Key Identifier: keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:34:f5:a7:9c:ca:b5:0a:da:1c:d8:50:f2:8e:b1:1f:0f:60: f9:2d:e9:a0:a7:ae:20:14:61:08:22:77:ec:36:83:af:70:80: 11:57:65:87:04:87:49:fb:ee:70:a1:41:a6:f8:37:73:a1:04: 8c:c9:1f:05:54:09:23:75:d2:65:4c:7c:c5:76:1e:4c:ee:73: 95:5a:04:70:16:3a:7f:6a:77:44:87:c8:63:5b:8c:68:2e:e4: 66:75:c5:38:24:2a:9c:3e:3c:0c:06:03:3f:f8:60:39:b4:5f: 6d:22:95:2d:1c:5b:93:b3:43:3b:34:41:8f:d4:33:d8:19:d2: 78:fd:98:4d:c0:8b:f0:69:05:1d:3b:0b:03:cc:06:b9:81:c3: 13:6a:93:55:7f:a2:a0:59:df:23:4e:d0:32:42:3b:6c:36:84: e3:1c:78:96:ae:8b:04:ac:29:15:07:68:45:62:88:d5:7f:c5: 8e:fd:35:55:f9:d3:7e:14:3e:a1:b5:fb:41:a8:af:cc:a1:a7: 87:85:b2:3f:0f:3f:73:1f:8c:d4:68:ca:c3:9d:5d:04:37:1c: 8d:68:8f:27:4b:62:61:10:97:32:49:6b:f2:7c:1b:3f:14:6f: e6:5f:1b:05:5b:b7:34:d1:f8:cc:59:1b:01:e7:66:1b:49:9b: 79:81:5e:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RTgxMTAvBgNVBAUTKDMwMjczMDgxNTkxNTE5NDFBQjczNEM3MjA2MTdERjdG RENDMjQxMEMwHhcNMjUxMjI0MTcxMTI2WhcNMjUxMjMxMTcxMTI2WjAYMRYwFAYD VQQDDA02OTRjMWViZS04NGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjSu0ssdk3+4JRncEKyVyfdl+dqtzEhy4NMYyNTVzkDJeN35hFMz/MykToi64 fdrMqgGb8fMLM8y+rYFGZ8mtdmxWKoNr0mhkjT2lE0uT9ZpIozePFo0P8zWOst09 C2knJ6uCqqjzr5jlG0xvj1fjW31Cr85B3jzVKPIByc5LtsOrE167Wrh6Fdrn+dqP oCP7a56CyL0+vmuGSxEipcl9p7gNHWxO+OQqxzGDats3AVc5tcWEOGrs9TjM+tbw M3v1FrEzqvn8O4IreZldFNYdJicboeTep/cWIMFE3sk0IADyXUvjiH8/zlW88Cgw 3lzDs60lQX1kfv9WGsv22AOV6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpXJADs a7nB4CZHk70b6PwKOMCmMB8GA1UdIwQYMBaAFDAnMIFZFRlBq3NMcgYX33/cwkEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFOC9GMTZFMTg1NjVD NTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdVR3JjMHh5QmhmZmY5ekNR UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01DY3dnVmtWR1VHcmMweHlCaGZmZjl6Q1FRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdFOC9GMTZFMTg1NjVDNTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdV R3JjMHh5QmhmZmY5ekNRUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuNPWnnMq1Ctoc2FDyjrEfD2D5Lemgp64gFGEIInfsNoOvcIARV2WH BIdJ++5woUGm+DdzoQSMyR8FVAkjddJlTHzFdh5M7nOVWgRwFjp/andEh8hjW4xo LuRmdcU4JCqcPjwMBgM/+GA5tF9tIpUtHFuTs0M7NEGP1DPYGdJ4/ZhNwIvwaQUd OwsDzAa5gcMTapNVf6KgWd8jTtAyQjtsNoTjHHiWrosErCkVB2hFYojVf8WO/TVV +dN+FD6htftBqK/MoaeHhbI/Dz9zH4zUaMrDnV0ENxyNaI8nS2JhEJcySWvyfBs/ FG/mXxsFW7c00fjMWRsB52YbSZt5gV5S -----END CERTIFICATE-----Generated at Fri Dec 26 07:50:34 2025 by rpki-client